> Offer a customer to enter their current IMAP creds A huge majority of users use free webmail providers, and the biggest players in that space all allow Oauth

> Offer a customer to enter their current IMAP creds A huge majority of users use free webmail providers, and the biggest players in that space all allow Oauth access to email. Oauth can be scoped down to just the access you need, whereas if you give out IMAP creds those can be used to wipe somebody's email account. Also, at least in Gmail's setup [0], the IMAP password seems to be your "Gmail password", which is the same thing as your Google account password. Don't ask for this. You don't want to have these passwords enter your company's infrastructure. [0] https://support.google.com/mail/answer/7126229?visit_id=636867133944394169-409026458&hl=en&rd=1 https://support.google.com/mail/answer/7126229?visit_id=6368...